Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/211755c4-d2e1-3788-bdb1-dfb03de039a2.roa
File:                     211755c4-d2e1-3788-bdb1-dfb03de039a2.roa (raw, json)
Hash identifier:          c5GdgS+yZarbGOaflsAANDI4Dinq44dpKBBhvznmGxg=
Subject key identifier:   0A:B5:7D:C6:04:9F:41:F0:0B:03:CD:16:43:2A:3C:C0:4F:E9:39:C4
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858450D140F07AD57FEBA608E6280
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/211755c4-d2e1-3788-bdb1-dfb03de039a2.roa
Signing time:             Thu 29 Feb 2024 10:12:00 +0000
ROA not before:           Thu 29 Feb 2024 10:12:00 +0000
ROA not after:            Wed 29 May 2024 09:12:00 +0000
asID:                     149197
IP address blocks:        103.228.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 04:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:14:0f:07:ad:57:fe:ba:60:8e:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb 29 10:12:00 2024 GMT
            Not After : May 29 09:12:00 2024 GMT
        Subject: CN=3577ecb6-358f-446d-9cfe-51911c08a793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:9b:6f:b8:37:ea:25:ba:0a:33:ea:68:24:
                    60:52:5e:5f:a4:4c:0e:54:ca:4c:c5:10:a4:ec:e1:
                    78:34:43:61:ba:4d:4f:a3:94:3b:c7:fe:c4:0d:85:
                    52:6a:93:35:bc:5d:29:7a:31:13:d2:5d:34:9c:43:
                    8c:fb:89:41:c5:0b:89:ec:82:9f:41:10:1c:7b:c3:
                    d9:1a:d0:7a:41:85:56:3d:1a:e5:75:6d:d7:e9:ce:
                    36:27:9d:52:f1:ed:9b:23:62:3b:5e:3b:b7:33:29:
                    d6:e5:02:21:ce:58:3e:f3:29:3e:b9:2b:24:fd:e9:
                    2a:e0:af:dc:18:b3:2f:d6:44:6c:c1:71:1e:1d:93:
                    c8:81:ae:ea:a5:ec:d4:b3:e9:f6:21:3b:e0:3d:76:
                    d3:79:1f:6b:4d:5e:e0:44:b2:14:73:d7:b9:d8:2f:
                    34:ea:78:c0:10:e9:6c:43:60:fc:3a:18:66:6a:04:
                    d9:40:26:3c:ac:7e:13:62:15:51:23:f3:1c:ff:3c:
                    15:38:2f:87:71:2e:35:41:62:a4:aa:62:c9:73:18:
                    b1:b6:df:3a:50:eb:e4:7a:3e:47:fa:a7:98:8a:3d:
                    62:32:00:ed:6a:fb:04:70:39:07:fc:e1:5f:3b:0d:
                    b0:89:2b:a2:9c:fb:0e:ba:da:fa:95:5d:59:51:45:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B5:7D:C6:04:9F:41:F0:0B:03:CD:16:43:2A:3C:C0:4F:E9:39:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/211755c4-d2e1-3788-bdb1-dfb03de039a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:b0:f9:f2:07:02:83:5d:b0:8e:81:20:69:01:ad:1b:2b:
         22:07:e0:54:36:b0:28:11:ef:d0:f5:fe:7f:44:73:85:29:d5:
         93:d6:26:b5:dd:c5:95:0a:64:23:a3:ea:13:ca:5d:98:bf:9c:
         77:14:f5:b9:75:1c:cc:df:c3:6f:c3:15:7f:3f:9a:dd:16:cc:
         72:f7:ad:64:34:a3:86:0b:2d:9f:9d:35:2b:1c:03:b6:9d:7c:
         07:78:19:3c:e1:bd:18:0c:e2:04:d4:1a:30:6d:2b:92:ba:69:
         5b:88:03:ec:ec:a6:ed:55:c7:28:6a:3d:fd:a6:fa:a2:88:6c:
         8a:c6:f1:22:e9:42:4c:5a:37:f2:f8:b1:d4:90:12:52:f1:a0:
         2c:5b:99:fa:74:31:8b:cb:57:1f:b6:2b:cb:88:3e:de:91:a5:
         d5:19:19:40:c7:07:0a:d2:e1:fe:d8:7e:a9:f9:32:1f:39:6e:
         62:8e:ca:68:8c:28:a8:e1:e6:70:21:9e:43:a7:d9:d9:06:9c:
         23:80:75:7a:73:77:63:74:34:f1:84:1b:44:8b:47:04:0c:02:
         d6:14:5e:67:e7:2f:be:93:0d:07:48:00:61:7e:74:ac:8e:4d:
         0e:ba:d3:28:7b:31:e3:c1:b5:92:4a:74:90:cf:7f:89:56:fc:
         73:a5:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----